Cloud Security Engineer Leeds National Security West

• We design, build and maintain secure, cloud-native solutions to support our Security Operations Centre (SOC) capabilities.
• We develop and deploy cloud infrastructure using Infrastructure as Code (Terraform, CloudFormation or AWS CDK).
• We design and implement secure AWS architectures that align with security and compliance requirements.
• We build and maintain security monitoring, alerting and automated response capabilities across cloud environments.
• We integrate cloud platforms with security tooling, including SIEM solutions such as Microsoft Sentinel and Splunk.
• We leverage AWS security services and promote security best practices across engineering and development teams.
• We support incident response investigations, threat hunting activities and security improvement initiatives.
• We develop reusable implementation patterns, standards and automation to improve consistency and security across projects.
• We manage software configuration, source code repositories and CI/CD pipelines in line with DevSecOps principles.
• We work closely with internal and external stakeholders to deliver secure and innovative cloud solutions.
• We identify opportunities to leverage AI and automation to enhance security operations and operational efficiency.
• For Senior Engineers, we lead technical delivery, mentor engineers and drive engineering best practices within the team.

Technologies:

• AI
• AWS
• Ansible
• Bash
• CI/CD
• Cloud
• CloudWatch
• DevSecOps
• Grafana
• IAM
• Support
• Kubernetes
• OpenShift
• Prometheus
• Puppet
• Python
• Security
• Splunk
• Terraform

• We are looking for talented and versatile Cloud Engineers to join our Engineering team.
• We need someone skilled in a range of AWS services and committed to keeping up to date with the latest releases and best practices.
• We are looking for experience with AWS security services and implementing cloud security best practices, including identity, monitoring, threat detection and data protection.
• We need an understanding of Security Operations, including monitoring, alerting, incident response, threat detection, and SIEM platforms such as Microsoft Sentinel or Splunk.
• We are looking for a strong understanding of Identity and Access Management (IAM), least-privilege access principles, and privileged access controls.
• We need knowledge of DevSecOps practices and integrating security controls into CI/CD pipelines.
• We are looking for experience using Infrastructure as Code, such as Terraform, CloudFormation or AWS CDK.
• We need experience with monitoring and observability tools such as CloudWatch, Grafana or Prometheus.
• We are looking for experience with container orchestration platforms such as Kubernetes, Amazon ECS or OpenShift, including container security best practices.
• We need an understanding of networking principles and how they translate to software-defined networking in cloud environments.
• We are looking for experience using configuration management tools such as Ansible, Puppet or Chef.
• We need proficiency in scripting in at least one language, such as Python, Bash or Go.
• We are looking for a keen interest in AI and emerging cyber security technologies.
• We need excellent troubleshooting, automation and problem-solving skills.
• We are looking for a collaborative mindset with a passion for learning new technologies and cyber security trends.
• AWS certifications are desirable but not essential.

We are BAE Systems Digital Intelligence, home to 4,500 digital, cyber and intelligence experts working collaboratively across 10 countries to collect, connect and understand complex data so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in demanding environments. This Cloud Security Engineer role is based in Leeds and sits within our Engineering team, supporting our Security Operations Centre capabilities. We offer hybrid working, 25 days holiday, flexible hours, private medical and dental insurance, a competitive pension scheme, cycle to work, taste cards, training and certification opportunities, and a dedicated Career Manager. We also support community engagement and outreach activities to help build tech and cyber skills in the region. We value diversity, inclusion and a culture where people can make a real difference, and we welcome candidates from all backgrounds.